CVE-2021-42126 — n/a / Ivanti Avalanche

CVE-2021-42126

n/a / Ivanti Avalanche PUBLISHED

Description (CNA)

An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.

Affected (CNA)

Vendor / product	Versions
n/a / Ivanti Avalanche	affected 6.3.3

CWE

CWE-285

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

ADP enrichment

CVE

No English description supplied.

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3